I think `"arn:aws:s3:::mapbox-node-binary/tilelive-s3/*"` should be sufficient?